Information on the processing of candidates' personal data

(pursuant to art. 13 of Regulation (EU) 2016/679)

1. Owner of the treatment

The Data Controller, i.e. the legal entity that determines the purposes and means of processing your personal data, is:

HANTECH MEDICAL ITALY SPA

1. Registered office: Via Giacomo Matteotti 27/A, 45030 Villamarzana (RO), Italy
2. Tax Code and VAT Number: 00051170298
3. Email address for privacy-related contacts: HR.Italy@hantechmedical.com
4.  

2. Purpose and legal basis for the processing

The personal data you provide by submitting your CV or by filling out forms on recruiting portals will be processed exclusively for the following purposes:

a) Research, selection and evaluation of personnel, for the position for which you have applied or for other open positions compatible with your professional profile.

b) Managing communications with you throughout the selection process.

The legal basis for this processing is Article 6, paragraph 1, letter b) of the GDPR, as the processing is necessary for the implementation of pre-contractual measures taken at your request (evaluation of your application for a potential job).

3. Categories of data processed

The processing will concern the common personal data you entered in your CV, such as, for example: personal details, contact details, information relating to your educational background and professional experience, as well as any other information you freely decide to provide.

We ask you not to include in your CV any data belonging to special categories (pursuant to Article 9 of the GDPR), such as data relating to health, political opinions, racial or ethnic origin, trade union membership, etc. If the inclusion of such data is required by law (e.g., belonging to protected categories pursuant to Law 68/99), please limit yourself to providing only strictly relevant information.

4. Mode of the data processing and recipients

Your data will be processed using manual and electronic means by specifically authorized and trained internal personnel of HANTECH MEDICAL ITALY SPA (e.g., Human Resources and line managers involved in the selection process). Your data will not be disseminated or shared with third parties, with the exception of any external companies that support the Company in the recruiting process, which will act as Data Processors pursuant to Article 28 of the GDPR.

5. Period data retention

Your personal data will be retained for the time strictly necessary to manage the selection process for the position for which you have applied. If you are unsuccessful in the selection process, or if you submitted a speculative application, your data will be retained for a maximum of 24 months from the date of collection, in order to consider you for future job opportunities that match your profile. After this period, the data will be deleted or irreversibly anonymized. If the selection process is successful, your data will be processed in accordance with the employee privacy policy.

6. Nature of the provision of data

Providing your personal data is optional but necessary to evaluate your application. Failure to provide it would make it impossible for the Company to consider your request and, therefore, include you in the selection process.

7. Rights of the interested party

As a data subject, you have the right to exercise at any time the rights provided for in Articles 15 to 22 of the GDPR, including:

1. Obtain confirmation as to whether or not data concerning you is being processed and access such data (right of access).
2. Request the rectification of inaccurate data or the integration of incomplete data (right to rectification).
3. Request the deletion of your data, in the cases provided for by law (right to be forgotten).
4. Request limitation of processing, in cases provided for by law.
5. Object to the processing of your data.

To exercise your rights, you can send a written communication to the email address: HR.Italy@hantechmedical.com .

8. Right to propose complaint

If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with the competent supervisory authority. In Italy, this authority is the Italian Data Protection Authority (Garante per la protezione dei dati personali). The Authority's contact details are available on its official website: www.gpdp.it